@urateam/core 0.1.33 → 0.1.34

package/dist/pipeline/scratch-file-guard.js

@@ -0,0 +1,155 @@
+/**
+ * Tier 1a — scratch-file denylist gate.
+ *
+ * Wired into the pipeline runner right before push (alongside the org-policy
+ * gate). Scans for added files matching a denylist of "agent self-documentation"
+ * artifacts (FINAL_CHECKLIST.md, commit-test-changes.sh, TESTING_COMPLETE.md,
+ * *.bak, untracked *.log, etc.) that historically slip past auto-commit and
+ * ship in PRs.
+ *
+ * On a match, the runner pushes a `category: "scratch-files"` blocking
+ * `ReviewFinding` and forces the PR to draft. The operator decides whether to
+ * delete; the gate never auto-deletes.
+ *
+ * Escape hatch: `URATEAM_DISABLE_SCRATCH_GUARD=true`.
+ *
+ * The matcher is a pure function (`matchScratchPatterns`) so it is unit-
+ * testable without git; the git layer (`enumerateAddedFiles`) is exercised by
+ * the runner-level integration. See `__tests__/scratch-file-guard.test.ts`.
+ */
+import { gitExecSafe } from "../repo/git.js";
+/**
+ * Repo-root markdown files that are legitimate project documentation. New
+ * markdown at the repo root NOT in this set is treated as a scratch artifact.
+ * Match is case-insensitive on the basename.
+ */
+const ROOT_MARKDOWN_EXEMPTIONS = new Set([
+    "README.md",
+    "CLAUDE.md",
+    "CHANGELOG.md",
+    "CONTRIBUTING.md",
+    "SECURITY.md",
+    "CODE_OF_CONDUCT.md",
+    "LICENSE.md",
+    "AUTHORS.md",
+].map((s) => s.toLowerCase()));
+/**
+ * Denylist patterns. Each predicate runs against a worktree-relative path.
+ * Order matters: the first match wins (paths are reported once even if they
+ * match multiple patterns).
+ *
+ * Patterns are intentionally narrow to keep the false-positive rate low —
+ * exemptions cover the standard project-documentation roster. If a legitimate
+ * file is matched, the operator can rename it or set
+ * `URATEAM_DISABLE_SCRATCH_GUARD=true` for the affected run.
+ */
+const SCRATCH_PATTERNS = [
+    // *.bak and *.bak.* anywhere in the tree (config.bak.20260511, foo.ts.bak).
+    { name: "bak", test: (p) => /\.bak(\.[^/]+)?$/i.test(p) },
+    // Repo-root summary / report / checklist markdown the agent generates as
+    // self-narrative. Anchored to no slashes so subdirectory docs are exempt.
+    {
+        name: "report-md",
+        test: (p) => /^[^/]+$/.test(p) &&
+            (/^TEST_.*\.md$/i.test(p) ||
+                /^TESTING_.*\.md$/i.test(p) ||
+                /^FINAL_.*\.md$/i.test(p) ||
+                /_REPORT\.md$/i.test(p) ||
+                /_CHECKLIST\.md$/i.test(p)),
+    },
+    // Repo-root one-off shell scripts (commit-test.sh, run-verification.sh).
+    // Nested scripts/setup.sh, deploy/restart.sh, etc. are exempt.
+    {
+        name: "root-shell",
+        test: (p) => /^(commit|run)-[^/]*\.sh$/i.test(p),
+    },
+    // *.tmp and *.log anywhere in the diff. .log included as denylist because
+    // any committed log file is almost certainly a stray run artifact; if a
+    // project legitimately tracks logs (rare), the escape hatch handles it.
+    { name: "tmp", test: (p) => /\.tmp$/i.test(p) },
+    { name: "log", test: (p) => /\.log$/i.test(p) },
+    // Any new repo-root *.md NOT in the standard project-documentation set.
+    // This is the catch-all for "agent wrote a summary at the root". Runs last
+    // so the more-specific TEST_/FINAL_/_REPORT/_CHECKLIST patterns take precedence
+    // (purely cosmetic — the same path is flagged either way).
+    {
+        name: "root-md-non-exempt",
+        test: (p) => {
+            if (!/^[^/]+\.md$/i.test(p))
+                return false;
+            const lower = p.toLowerCase();
+            return !ROOT_MARKDOWN_EXEMPTIONS.has(lower);
+        },
+    },
+];
+/**
+ * Pure matcher: given a list of worktree-relative paths, return the subset
+ * that match any scratch pattern, in input order, deduplicated.
+ *
+ * Exported for unit testing. The runner calls `findScratchFiles` instead,
+ * which wraps this with the git query and the escape-hatch env var.
+ */
+export function matchScratchPatterns(paths) {
+    const seen = new Set();
+    const matches = [];
+    for (const p of paths) {
+        if (seen.has(p))
+            continue;
+        if (SCRATCH_PATTERNS.some((pat) => pat.test(p))) {
+            seen.add(p);
+            matches.push(p);
+        }
+    }
+    return matches;
+}
+/**
+ * Enumerate paths added in the current branch relative to `origin/<baseBranch>`,
+ * including both committed adds (the common case after auto-commit) and any
+ * stray uncommitted/untracked files (belt-and-suspenders).
+ *
+ * Returns an empty array on git failure (fail-open — the gate is best-effort,
+ * not a hard correctness boundary).
+ */
+async function enumerateAddedFiles(worktreePath, baseBranch) {
+    const seen = new Set();
+    // Committed adds against the remote base. Use `origin/<base>...HEAD` (three
+    // dots) to compute against the merge-base, mirroring `getChangedFiles`.
+    const diffOut = await gitExecSafe([
+        "diff",
+        "--name-only",
+        "--diff-filter=A",
+        `origin/${baseBranch}...HEAD`,
+    ], worktreePath);
+    for (const line of diffOut.split("\n")) {
+        const p = line.trim();
+        if (p)
+            seen.add(p);
+    }
+    // Uncommitted/untracked. Porcelain `??` (untracked) or `A ` (staged add).
+    const statusOut = await gitExecSafe(["status", "--porcelain"], worktreePath);
+    for (const line of statusOut.split("\n")) {
+        if (!line.trim())
+            continue;
+        const xy = line.slice(0, 2);
+        const rest = line.slice(3);
+        if (xy === "??" || xy.includes("A")) {
+            const p = rest.includes(" -> ") ? rest.split(" -> ")[1].trim() : rest.trim();
+            if (p)
+                seen.add(p);
+        }
+    }
+    return [...seen];
+}
+/**
+ * Public entry point. Runs the gate against the worktree at `worktreePath`,
+ * with `baseBranch` as the comparison point (typically the repo's default
+ * branch). Honors `URATEAM_DISABLE_SCRATCH_GUARD=true` as an escape hatch.
+ */
+export async function findScratchFiles(worktreePath, baseBranch) {
+    if (process.env.URATEAM_DISABLE_SCRATCH_GUARD === "true") {
+        return { files: [], skipped: true };
+    }
+    const candidates = await enumerateAddedFiles(worktreePath, baseBranch);
+    return { files: matchScratchPatterns(candidates), skipped: false };
+}
+//# sourceMappingURL=scratch-file-guard.js.map

package/dist/pipeline/scratch-file-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"scratch-file-guard.js","sourceRoot":"","sources":["../../src/pipeline/scratch-file-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AACH,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C;;;;GAIG;AACH,MAAM,wBAAwB,GAAG,IAAI,GAAG,CACtC;IACE,WAAW;IACX,WAAW;IACX,cAAc;IACd,iBAAiB;IACjB,aAAa;IACb,oBAAoB;IACpB,YAAY;IACZ,YAAY;CACb,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,CAAC,CAC9B,CAAC;AAEF;;;;;;;;;GASG;AACH,MAAM,gBAAgB,GAGjB;IACH,4EAA4E;IAC5E,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IACzD,yEAAyE;IACzE,0EAA0E;IAC1E;QACE,IAAI,EAAE,WAAW;QACjB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CACV,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;YACjB,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvB,mBAAmB,CAAC,IAAI,CAAC,CAAC,CAAC;gBAC3B,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC;gBACzB,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC;gBACvB,kBAAkB,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAChC;IACD,yEAAyE;IACzE,+DAA+D;IAC/D;QACE,IAAI,EAAE,YAAY;QAClB,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,2BAA2B,CAAC,IAAI,CAAC,CAAC,CAAC;KACjD;IACD,0EAA0E;IAC1E,wEAAwE;IACxE,wEAAwE;IACxE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IAC/C,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;IAC/C,wEAAwE;IACxE,2EAA2E;IAC3E,gFAAgF;IAChF,2DAA2D;IAC3D;QACE,IAAI,EAAE,oBAAoB;QAC1B,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE;YACV,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC;gBAAE,OAAO,KAAK,CAAC;YAC1C,MAAM,KAAK,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC9B,OAAO,CAAC,wBAAwB,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC9C,CAAC;KACF;CACF,CAAC;AAEF;;;;;;GAMG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAAe;IAClD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAAE,SAAS;QAC1B,IAAI,gBAAgB,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAChD,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;YACZ,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IACD,OAAO,OAAO,CAAC;AACjB,CAAC;AAED;;;;;;;GAOG;AACH,KAAK,UAAU,mBAAmB,CAChC,YAAoB,EACpB,UAAkB;IAElB,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAE/B,4EAA4E;IAC5E,wEAAwE;IACxE,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B;QACE,MAAM;QACN,aAAa;QACb,iBAAiB;QACjB,UAAU,UAAU,SAAS;KAC9B,EACD,YAAY,CACb,CAAC;IACF,KAAK,MAAM,IAAI,IAAI,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QACtB,IAAI,CAAC;YAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,CAAC;IAED,0EAA0E;IAC1E,MAAM,SAAS,GAAG,MAAM,WAAW,CAAC,CAAC,QAAQ,EAAE,aAAa,CAAC,EAAE,YAAY,CAAC,CAAC;IAC7E,KAAK,MAAM,IAAI,IAAI,SAAS,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACzC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,MAAM,EAAE,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;QAC5B,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC3B,IAAI,EAAE,KAAK,IAAI,IAAI,EAAE,CAAC,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC;YACpC,MAAM,CAAC,GAAG,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC;YAC9E,IAAI,CAAC;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;QACrB,CAAC;IACH,CAAC;IAED,OAAO,CAAC,GAAG,IAAI,CAAC,CAAC;AACnB,CAAC;AASD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,YAAoB,EACpB,UAAkB;IAElB,IAAI,OAAO,CAAC,GAAG,CAAC,6BAA6B,KAAK,MAAM,EAAE,CAAC;QACzD,OAAO,EAAE,KAAK,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACtC,CAAC;IACD,MAAM,UAAU,GAAG,MAAM,mBAAmB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IACvE,OAAO,EAAE,KAAK,EAAE,oBAAoB,CAAC,UAAU,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACrE,CAAC"}

package/dist/pipeline/spec-vs-impl-gate.d.ts

@@ -0,0 +1,49 @@
+export interface PromisedSymbol {
+    prefix: "config" | "opts" | "env" | "deps" | "options";
+    symbol: string;
+}
+/**
+ * Pure matcher: scans `content` for JSDoc blocks and returns the list of
+ * `<prefix>.<symbol>` references inside them, preserving first-occurrence
+ * order and deduplicating across blocks.
+ */
+export declare function extractPromisedSymbols(content: string): PromisedSymbol[];
+export interface SpecVsImplFinding {
+    /** Worktree-relative path of the file that contains the JSDoc reference. */
+    filePath: string;
+    /** The bare symbol promised in the docblock (the part after the prefix —
+     *  e.g. `maxAttempts` for a docblock that referenced `config.maxAttempts`). */
+    promisedSymbol: string;
+    /** The prefix it was referenced under (e.g. `config`). */
+    promisedPrefix: PromisedSymbol["prefix"];
+}
+/**
+ * Pure orchestrator for the per-file check. Given a list of changed files
+ * (path + content) and a corpus-lookup function, returns the list of
+ * findings. Exported for unit testing; the runner uses `checkSpecVsImpl`
+ * instead.
+ */
+export declare function checkSpecVsImplFromContent(args: {
+    files: Array<{
+        path: string;
+        content: string;
+    }>;
+    corpusContainsSymbol: (symbol: string) => boolean;
+}): SpecVsImplFinding[];
+export interface SpecVsImplResult {
+    findings: SpecVsImplFinding[];
+    skipped: boolean;
+}
+/**
+ * Public entry point. Scans the agent's added/modified TS files for JSDoc
+ * references that aren't defined anywhere in the worktree's tracked source.
+ * Returns a flat list of findings.
+ *
+ * Escape hatch: `URATEAM_DISABLE_SPEC_VS_IMPL_GATE=true` short-circuits.
+ *
+ * Fail-open behavior: errors during git or filesystem access return an empty
+ * result with `skipped: false`. The runner additionally wraps the call in a
+ * try/catch and logs a warning rather than blocking the pipeline.
+ */
+export declare function checkSpecVsImpl(worktreePath: string, baseBranch: string): Promise<SpecVsImplResult>;
+//# sourceMappingURL=spec-vs-impl-gate.d.ts.map

package/dist/pipeline/spec-vs-impl-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-vs-impl-gate.d.ts","sourceRoot":"","sources":["../../src/pipeline/spec-vs-impl-gate.ts"],"names":[],"mappings":"AAsCA,MAAM,WAAW,cAAc;IAC7B,MAAM,EAAE,QAAQ,GAAG,MAAM,GAAG,KAAK,GAAG,MAAM,GAAG,SAAS,CAAC;IACvD,MAAM,EAAE,MAAM,CAAC;CAChB;AAED;;;;GAIG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,EAAE,MAAM,GAAG,cAAc,EAAE,CAmBxE;AAED,MAAM,WAAW,iBAAiB;IAChC,4EAA4E;IAC5E,QAAQ,EAAE,MAAM,CAAC;IACjB;mFAC+E;IAC/E,cAAc,EAAE,MAAM,CAAC;IACvB,0DAA0D;IAC1D,cAAc,EAAE,cAAc,CAAC,QAAQ,CAAC,CAAC;CAC1C;AAED;;;;;GAKG;AACH,wBAAgB,0BAA0B,CAAC,IAAI,EAAE;IAC/C,KAAK,EAAE,KAAK,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;IAChD,oBAAoB,EAAE,CAAC,MAAM,EAAE,MAAM,KAAK,OAAO,CAAC;CACnD,GAAG,iBAAiB,EAAE,CAetB;AAED,MAAM,WAAW,gBAAgB;IAC/B,QAAQ,EAAE,iBAAiB,EAAE,CAAC;IAC9B,OAAO,EAAE,OAAO,CAAC;CAClB;AAoED;;;;;;;;;;GAUG;AACH,wBAAsB,eAAe,CACnC,YAAY,EAAE,MAAM,EACpB,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC,gBAAgB,CAAC,CAkC3B"}

package/dist/pipeline/spec-vs-impl-gate.js

@@ -0,0 +1,177 @@
+/**
+ * Tier 1c — spec-vs-impl JSDoc gate.
+ *
+ * Catches the failure mode where the autonomous agent writes a JSDoc that
+ * references a config / option / env / deps / options field by name, but
+ * never actually adds that field to any schema or implementation. (The PR
+ * #254 failure mode is detailed in `docs/superpowers/plans/2026-05-11-
+ * pipeline-reliability-tiers.md`; we intentionally do NOT spell the
+ * canonical example symbol here so the corpus check doesn't launder it
+ * past the gate in regression tests.)
+ *
+ * Algorithm (per file in the agent's diff):
+ *   1. Find every `/** ... *\/` block.
+ *   2. Inside each block, extract identifiers matching
+ *      `\b(config|opts|env|deps|options)\.([A-Za-z_][A-Za-z0-9_]*)\b`.
+ *   3. For each unique (file, symbol), check whether the symbol exists in any
+ *      `.ts` / `.tsx` / `.js` / `.jsx` file under the worktree.
+ *   4. If not found, emit a `SpecVsImplFinding`. The runner pushes a
+ *      `category: "spec-vs-impl"` blocking ReviewFinding and forces draft.
+ *
+ * Heuristic — false positives are accepted as warnings in v1. Calibrate after
+ * two weeks of production data per the operator brief. Escape hatch:
+ * `URATEAM_DISABLE_SPEC_VS_IMPL_GATE=true`.
+ *
+ * Architecture: the matcher (`extractPromisedSymbols`) is pure and unit-
+ * tested directly. The corpus-lookup is injected via `corpusContainsSymbol`
+ * so tests don't need a real worktree. The git layer
+ * (`enumerateChangedTsFiles` + `buildWorktreeCorpus`) is glued together by
+ * the public `checkSpecVsImpl` entry point.
+ */
+import { readFile } from "node:fs/promises";
+import { join } from "node:path";
+import { gitExecSafe } from "../repo/git.js";
+const PROMISED_REF_REGEX = /\b(config|opts|env|deps|options)\.([A-Za-z_][A-Za-z0-9_]*)\b/g;
+const JSDOC_BLOCK_REGEX = /\/\*\*[\s\S]*?\*\//g;
+/**
+ * Pure matcher: scans `content` for JSDoc blocks and returns the list of
+ * `<prefix>.<symbol>` references inside them, preserving first-occurrence
+ * order and deduplicating across blocks.
+ */
+export function extractPromisedSymbols(content) {
+    const seen = new Set();
+    const result = [];
+    const jsdocBlocks = content.match(JSDOC_BLOCK_REGEX);
+    if (!jsdocBlocks)
+        return result;
+    for (const block of jsdocBlocks) {
+        for (const match of block.matchAll(PROMISED_REF_REGEX)) {
+            const prefix = match[1];
+            const symbol = match[2];
+            const key = `${prefix}.${symbol}`;
+            if (seen.has(key))
+                continue;
+            seen.add(key);
+            result.push({ prefix, symbol });
+        }
+    }
+    return result;
+}
+/**
+ * Pure orchestrator for the per-file check. Given a list of changed files
+ * (path + content) and a corpus-lookup function, returns the list of
+ * findings. Exported for unit testing; the runner uses `checkSpecVsImpl`
+ * instead.
+ */
+export function checkSpecVsImplFromContent(args) {
+    const findings = [];
+    for (const file of args.files) {
+        const promised = extractPromisedSymbols(file.content);
+        for (const p of promised) {
+            if (!args.corpusContainsSymbol(p.symbol)) {
+                findings.push({
+                    filePath: file.path,
+                    promisedSymbol: p.symbol,
+                    promisedPrefix: p.prefix,
+                });
+            }
+        }
+    }
+    return findings;
+}
+const TS_EXT_REGEX = /\.(tsx?|jsx?)$/;
+/**
+ * Enumerate TS/TSX/JS/JSX files added or modified vs `origin/<baseBranch>`.
+ * The gate only inspects the agent's own changes; pre-existing JSDoc drift in
+ * the rest of the repo is not in scope.
+ *
+ * Fail-open: a git error returns an empty list.
+ */
+async function enumerateChangedTsFiles(worktreePath, baseBranch) {
+    const out = await gitExecSafe([
+        "diff",
+        "--name-only",
+        "--diff-filter=AM",
+        `origin/${baseBranch}...HEAD`,
+    ], worktreePath);
+    return out
+        .split("\n")
+        .map((s) => s.trim())
+        .filter(Boolean)
+        .filter((p) => TS_EXT_REGEX.test(p));
+}
+/**
+ * Build a string corpus by concatenating every TS/TSX/JS/JSX file under the
+ * worktree (excluding `node_modules`, `dist`, `.git`). The corpus is searched
+ * via `.includes(symbol)` — fast and good enough for heuristic detection.
+ * False positives are acceptable per the brief.
+ */
+async function buildWorktreeCorpus(worktreePath) {
+    const out = await gitExecSafe([
+        "ls-files",
+        "--cached",
+        "--others",
+        "--exclude-standard",
+        "--",
+        "*.ts",
+        "*.tsx",
+        "*.js",
+        "*.jsx",
+    ], worktreePath);
+    const paths = out
+        .split("\n")
+        .map((s) => s.trim())
+        .filter(Boolean);
+    let corpus = "";
+    for (const p of paths) {
+        try {
+            corpus += "\n" + (await readFile(join(worktreePath, p), "utf8"));
+        }
+        catch {
+            // Skip unreadable files; the corpus is best-effort.
+        }
+    }
+    return corpus;
+}
+/**
+ * Public entry point. Scans the agent's added/modified TS files for JSDoc
+ * references that aren't defined anywhere in the worktree's tracked source.
+ * Returns a flat list of findings.
+ *
+ * Escape hatch: `URATEAM_DISABLE_SPEC_VS_IMPL_GATE=true` short-circuits.
+ *
+ * Fail-open behavior: errors during git or filesystem access return an empty
+ * result with `skipped: false`. The runner additionally wraps the call in a
+ * try/catch and logs a warning rather than blocking the pipeline.
+ */
+export async function checkSpecVsImpl(worktreePath, baseBranch) {
+    if (process.env.URATEAM_DISABLE_SPEC_VS_IMPL_GATE === "true") {
+        return { findings: [], skipped: true };
+    }
+    const changedFiles = await enumerateChangedTsFiles(worktreePath, baseBranch);
+    if (changedFiles.length === 0) {
+        return { findings: [], skipped: false };
+    }
+    // Read only the changed files for the JSDoc scan. The corpus (used for
+    // symbol existence) is built once over the whole worktree.
+    const filePairs = [];
+    for (const p of changedFiles) {
+        try {
+            const content = await readFile(join(worktreePath, p), "utf8");
+            filePairs.push({ path: p, content });
+        }
+        catch {
+            // Skip — likely deleted in HEAD; not relevant for the JSDoc scan.
+        }
+    }
+    if (filePairs.length === 0) {
+        return { findings: [], skipped: false };
+    }
+    const corpus = await buildWorktreeCorpus(worktreePath);
+    const findings = checkSpecVsImplFromContent({
+        files: filePairs,
+        corpusContainsSymbol: (sym) => corpus.includes(sym),
+    });
+    return { findings, skipped: false };
+}
+//# sourceMappingURL=spec-vs-impl-gate.js.map

package/dist/pipeline/spec-vs-impl-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"spec-vs-impl-gate.js","sourceRoot":"","sources":["../../src/pipeline/spec-vs-impl-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AACH,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAE7C,MAAM,kBAAkB,GACtB,+DAA+D,CAAC;AAClE,MAAM,iBAAiB,GAAG,qBAAqB,CAAC;AAOhD;;;;GAIG;AACH,MAAM,UAAU,sBAAsB,CAAC,OAAe;IACpD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAU,CAAC;IAC/B,MAAM,MAAM,GAAqB,EAAE,CAAC;IAEpC,MAAM,WAAW,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,CAAC;IACrD,IAAI,CAAC,WAAW;QAAE,OAAO,MAAM,CAAC;IAEhC,KAAK,MAAM,KAAK,IAAI,WAAW,EAAE,CAAC;QAChC,KAAK,MAAM,KAAK,IAAI,KAAK,CAAC,QAAQ,CAAC,kBAAkB,CAAC,EAAE,CAAC;YACvD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAA6B,CAAC;YACpD,MAAM,MAAM,GAAG,KAAK,CAAC,CAAC,CAAE,CAAC;YACzB,MAAM,GAAG,GAAG,GAAG,MAAM,IAAI,MAAM,EAAE,CAAC;YAClC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC;gBAAE,SAAS;YAC5B,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YACd,MAAM,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAC;QAClC,CAAC;IACH,CAAC;IAED,OAAO,MAAM,CAAC;AAChB,CAAC;AAYD;;;;;GAKG;AACH,MAAM,UAAU,0BAA0B,CAAC,IAG1C;IACC,MAAM,QAAQ,GAAwB,EAAE,CAAC;IACzC,KAAK,MAAM,IAAI,IAAI,IAAI,CAAC,KAAK,EAAE,CAAC;QAC9B,MAAM,QAAQ,GAAG,sBAAsB,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtD,KAAK,MAAM,CAAC,IAAI,QAAQ,EAAE,CAAC;YACzB,IAAI,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC;gBACzC,QAAQ,CAAC,IAAI,CAAC;oBACZ,QAAQ,EAAE,IAAI,CAAC,IAAI;oBACnB,cAAc,EAAE,CAAC,CAAC,MAAM;oBACxB,cAAc,EAAE,CAAC,CAAC,MAAM;iBACzB,CAAC,CAAC;YACL,CAAC;QACH,CAAC;IACH,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAOD,MAAM,YAAY,GAAG,gBAAgB,CAAC;AAEtC;;;;;;GAMG;AACH,KAAK,UAAU,uBAAuB,CACpC,YAAoB,EACpB,UAAkB;IAElB,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B;QACE,MAAM;QACN,aAAa;QACb,kBAAkB;QAClB,UAAU,UAAU,SAAS;KAC9B,EACD,YAAY,CACb,CAAC;IACF,OAAO,GAAG;SACP,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC;SACf,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;AACzC,CAAC;AAED;;;;;GAKG;AACH,KAAK,UAAU,mBAAmB,CAAC,YAAoB;IACrD,MAAM,GAAG,GAAG,MAAM,WAAW,CAC3B;QACE,UAAU;QACV,UAAU;QACV,UAAU;QACV,oBAAoB;QACpB,IAAI;QACJ,MAAM;QACN,OAAO;QACP,MAAM;QACN,OAAO;KACR,EACD,YAAY,CACb,CAAC;IACF,MAAM,KAAK,GAAG,GAAG;SACd,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,OAAO,CAAC,CAAC;IAEnB,IAAI,MAAM,GAAG,EAAE,CAAC;IAChB,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC;YACH,MAAM,IAAI,IAAI,GAAG,CAAC,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAC;QACnE,CAAC;QAAC,MAAM,CAAC;YACP,oDAAoD;QACtD,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC;AAED;;;;;;;;;;GAUG;AACH,MAAM,CAAC,KAAK,UAAU,eAAe,CACnC,YAAoB,EACpB,UAAkB;IAElB,IAAI,OAAO,CAAC,GAAG,CAAC,iCAAiC,KAAK,MAAM,EAAE,CAAC;QAC7D,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACzC,CAAC;IAED,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC,YAAY,EAAE,UAAU,CAAC,CAAC;IAC7E,IAAI,YAAY,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC9B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,uEAAuE;IACvE,2DAA2D;IAC3D,MAAM,SAAS,GAA6C,EAAE,CAAC;IAC/D,KAAK,MAAM,CAAC,IAAI,YAAY,EAAE,CAAC;QAC7B,IAAI,CAAC;YACH,MAAM,OAAO,GAAG,MAAM,QAAQ,CAAC,IAAI,CAAC,YAAY,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;YAC9D,SAAS,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC;QACvC,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;IAED,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAC1C,CAAC;IAED,MAAM,MAAM,GAAG,MAAM,mBAAmB,CAAC,YAAY,CAAC,CAAC;IAEvD,MAAM,QAAQ,GAAG,0BAA0B,CAAC;QAC1C,KAAK,EAAE,SAAS;QAChB,oBAAoB,EAAE,CAAC,GAAG,EAAE,EAAE,CAAC,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC;KACpD,CAAC,CAAC;IAEH,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;AACtC,CAAC"}

package/dist/pipeline/typecheck-gate.d.ts

@@ -0,0 +1,34 @@
+/**
+ * DI seam: the function that actually invokes the typecheck command. Tests
+ * inject a synthetic version; the runner imports and uses the real one (via
+ * the default in `runTypecheck`'s opts).
+ */
+export type TypecheckRunner = (command: string[], cwd: string, timeoutMs: number) => Promise<{
+    stdout: string;
+    stderr: string;
+    code: number;
+}>;
+export interface TypecheckResult {
+    /** True when typecheck exited 0. */
+    passed: boolean;
+    /** Number of lines matching a TypeScript error signature (`error TSnnnn`).
+     *  Zero when the command failed for a non-typecheck reason (e.g. missing
+     *  binary); the caller distinguishes by also reading `passed` and `output`. */
+    errorCount: number;
+    /** Up to 5 error lines, each truncated at 500 chars with a trailing `…`. */
+    firstMessages: string[];
+    /** Full combined stdout + stderr, capped at 50 KB with a `(truncated)`
+     *  sentinel when oversize. Goes into the PR-body excerpt; the audit payload
+     *  uses `firstMessages` to stay bounded. */
+    output: string;
+    /** True when `URATEAM_DISABLE_TYPECHECK_GATE=true` short-circuited the gate.
+     *  In that case the rest of the fields are zero/empty; treat as "skip, don't
+     *  block". */
+    skipped: boolean;
+}
+export declare function runTypecheck(worktreePath: string, opts?: {
+    command?: string[];
+    timeoutMs?: number;
+    runner?: TypecheckRunner;
+}): Promise<TypecheckResult>;
+//# sourceMappingURL=typecheck-gate.d.ts.map

package/dist/pipeline/typecheck-gate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"typecheck-gate.d.ts","sourceRoot":"","sources":["../../src/pipeline/typecheck-gate.ts"],"names":[],"mappings":"AAoBA;;;;GAIG;AACH,MAAM,MAAM,eAAe,GAAG,CAC5B,OAAO,EAAE,MAAM,EAAE,EACjB,GAAG,EAAE,MAAM,EACX,SAAS,EAAE,MAAM,KACd,OAAO,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,CAAA;CAAE,CAAC,CAAC;AAE/D,MAAM,WAAW,eAAe;IAC9B,oCAAoC;IACpC,MAAM,EAAE,OAAO,CAAC;IAChB;;mFAE+E;IAC/E,UAAU,EAAE,MAAM,CAAC;IACnB,4EAA4E;IAC5E,aAAa,EAAE,MAAM,EAAE,CAAC;IACxB;;gDAE4C;IAC5C,MAAM,EAAE,MAAM,CAAC;IACf;;kBAEc;IACd,OAAO,EAAE,OAAO,CAAC;CAClB;AAqDD,wBAAsB,YAAY,CAChC,YAAY,EAAE,MAAM,EACpB,IAAI,CAAC,EAAE;IACL,OAAO,CAAC,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,CAAC,EAAE,eAAe,CAAC;CAC1B,GACA,OAAO,CAAC,eAAe,CAAC,CAoC1B"}

package/dist/pipeline/typecheck-gate.js

@@ -0,0 +1,89 @@
+/**
+ * Tier 1b — typecheck gate.
+ *
+ * Runs the project's idiomatic typecheck command inside the worktree before
+ * push. On failure, the runner surfaces a `category: "typecheck"` blocking
+ * `ReviewFinding` and emits a `pipeline.typecheck_failed` audit event. The
+ * existing draft-PR renderer picks up the finding and surfaces the first 5
+ * messages in the PR body.
+ *
+ * Escape hatch: `URATEAM_DISABLE_TYPECHECK_GATE=true`. Documented in CLAUDE.md.
+ *
+ * The gate is unit-tested via a runner DI hook (`TypecheckRunner`) so the test
+ * suite doesn't need a real `pnpm` / `tsc` install. The real default uses
+ * `execFile` per repo convention.
+ */
+import { execFile as execFileCb } from "node:child_process";
+import { promisify } from "node:util";
+const execFileAsync = promisify(execFileCb);
+const TS_ERROR_REGEX = /\berror TS\d+\b/;
+function parseFirstMessages(combinedOutput) {
+    const errorLines = combinedOutput
+        .split("\n")
+        .map((l) => l.trim())
+        .filter((l) => TS_ERROR_REGEX.test(l));
+    const firstMessages = errorLines.slice(0, 5).map((l) => l.length > 500 ? l.slice(0, 500) + "…" : l);
+    return { errorCount: errorLines.length, firstMessages };
+}
+function truncateOutput(combined, limit = 50_000) {
+    if (combined.length <= limit)
+        return combined;
+    return combined.slice(0, limit) + "\n…(truncated)";
+}
+/**
+ * Default runner: invokes the typecheck command via `execFile`. Captures both
+ * stdout and stderr and returns the exit code (0 = pass, anything else = fail).
+ */
+const defaultRunner = async (command, cwd, timeoutMs) => {
+    try {
+        const { stdout, stderr } = await execFileAsync(command[0], command.slice(1), {
+            cwd,
+            timeout: timeoutMs,
+            maxBuffer: 100 * 1024 * 1024, // 100 MB — typecheck output is bounded but not tiny
+        });
+        return { stdout, stderr, code: 0 };
+    }
+    catch (err) {
+        const e = err;
+        const code = typeof e.code === "number" ? e.code : 1;
+        return {
+            stdout: e.stdout ?? "",
+            stderr: e.stderr ?? e.message ?? "",
+            code,
+        };
+    }
+};
+export async function runTypecheck(worktreePath, opts) {
+    if (process.env.URATEAM_DISABLE_TYPECHECK_GATE === "true") {
+        return {
+            passed: true,
+            errorCount: 0,
+            firstMessages: [],
+            output: "",
+            skipped: true,
+        };
+    }
+    const command = opts?.command ?? ["pnpm", "-w", "typecheck"];
+    const timeoutMs = opts?.timeoutMs ?? 5 * 60 * 1000;
+    const runner = opts?.runner ?? defaultRunner;
+    const { stdout, stderr, code } = await runner(command, worktreePath, timeoutMs);
+    const combined = `${stderr}\n${stdout}`.trim();
+    if (code === 0) {
+        return {
+            passed: true,
+            errorCount: 0,
+            firstMessages: [],
+            output: "",
+            skipped: false,
+        };
+    }
+    const { errorCount, firstMessages } = parseFirstMessages(combined);
+    return {
+        passed: false,
+        errorCount,
+        firstMessages,
+        output: truncateOutput(combined),
+        skipped: false,
+    };
+}
+//# sourceMappingURL=typecheck-gate.js.map

package/dist/pipeline/typecheck-gate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"typecheck-gate.js","sourceRoot":"","sources":["../../src/pipeline/typecheck-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;GAcG;AACH,OAAO,EAAE,QAAQ,IAAI,UAAU,EAAE,MAAM,oBAAoB,CAAC;AAC5D,OAAO,EAAE,SAAS,EAAE,MAAM,WAAW,CAAC;AAEtC,MAAM,aAAa,GAAG,SAAS,CAAC,UAAU,CAAC,CAAC;AAgC5C,MAAM,cAAc,GAAG,iBAAiB,CAAC;AAEzC,SAAS,kBAAkB,CAAC,cAAsB;IAIhD,MAAM,UAAU,GAAG,cAAc;SAC9B,KAAK,CAAC,IAAI,CAAC;SACX,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;SACpB,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;IAEzC,MAAM,aAAa,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CACrD,CAAC,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC,CAC3C,CAAC;IAEF,OAAO,EAAE,UAAU,EAAE,UAAU,CAAC,MAAM,EAAE,aAAa,EAAE,CAAC;AAC1D,CAAC;AAED,SAAS,cAAc,CAAC,QAAgB,EAAE,KAAK,GAAG,MAAM;IACtD,IAAI,QAAQ,CAAC,MAAM,IAAI,KAAK;QAAE,OAAO,QAAQ,CAAC;IAC9C,OAAO,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,GAAG,gBAAgB,CAAC;AACrD,CAAC;AAED;;;GAGG;AACH,MAAM,aAAa,GAAoB,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,EAAE;IACvE,IAAI,CAAC;QACH,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,GAAG,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,CAAE,EAAE,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE;YAC5E,GAAG;YACH,OAAO,EAAE,SAAS;YAClB,SAAS,EAAE,GAAG,GAAG,IAAI,GAAG,IAAI,EAAE,oDAAoD;SACnF,CAAC,CAAC;QACH,OAAO,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC;IACrC,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,CAAC,GAAG,GAKT,CAAC;QACF,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;QACrD,OAAO;YACL,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,EAAE;YACtB,MAAM,EAAE,CAAC,CAAC,MAAM,IAAI,CAAC,CAAC,OAAO,IAAI,EAAE;YACnC,IAAI;SACL,CAAC;IACJ,CAAC;AACH,CAAC,CAAC;AAEF,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,YAAoB,EACpB,IAIC;IAED,IAAI,OAAO,CAAC,GAAG,CAAC,8BAA8B,KAAK,MAAM,EAAE,CAAC;QAC1D,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,EAAE;YACjB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,IAAI;SACd,CAAC;IACJ,CAAC;IAED,MAAM,OAAO,GAAG,IAAI,EAAE,OAAO,IAAI,CAAC,MAAM,EAAE,IAAI,EAAE,WAAW,CAAC,CAAC;IAC7D,MAAM,SAAS,GAAG,IAAI,EAAE,SAAS,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC;IACnD,MAAM,MAAM,GAAG,IAAI,EAAE,MAAM,IAAI,aAAa,CAAC;IAE7C,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,OAAO,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;IAChF,MAAM,QAAQ,GAAG,GAAG,MAAM,KAAK,MAAM,EAAE,CAAC,IAAI,EAAE,CAAC;IAE/C,IAAI,IAAI,KAAK,CAAC,EAAE,CAAC;QACf,OAAO;YACL,MAAM,EAAE,IAAI;YACZ,UAAU,EAAE,CAAC;YACb,aAAa,EAAE,EAAE;YACjB,MAAM,EAAE,EAAE;YACV,OAAO,EAAE,KAAK;SACf,CAAC;IACJ,CAAC;IAED,MAAM,EAAE,UAAU,EAAE,aAAa,EAAE,GAAG,kBAAkB,CAAC,QAAQ,CAAC,CAAC;IACnE,OAAO;QACL,MAAM,EAAE,KAAK;QACb,UAAU;QACV,aAAa;QACb,MAAM,EAAE,cAAc,CAAC,QAAQ,CAAC;QAChC,OAAO,EAAE,KAAK;KACf,CAAC;AACJ,CAAC"}

package/dist/types.d.ts

@@ -526,6 +526,9 @@ export declare const AuditEventTypeSchema: z.ZodEnum<{
     "qa.gap_issue_filed": "qa.gap_issue_filed";
     "review.fanout_fallback_used": "review.fanout_fallback_used";
     "review.model_low_output_ratio": "review.model_low_output_ratio";
+    "pipeline.scratch_files_blocked": "pipeline.scratch_files_blocked";
+    "pipeline.typecheck_failed": "pipeline.typecheck_failed";
+    "pipeline.spec_vs_impl_failed": "pipeline.spec_vs_impl_failed";
 }>;
 export type AuditEventType = z.infer<typeof AuditEventTypeSchema>;
 export declare const AuditActorTypeSchema: z.ZodEnum<{
@@ -582,6 +585,9 @@ export declare const AuditEventSchema: z.ZodObject<{
         "qa.gap_issue_filed": "qa.gap_issue_filed";
         "review.fanout_fallback_used": "review.fanout_fallback_used";
         "review.model_low_output_ratio": "review.model_low_output_ratio";
+        "pipeline.scratch_files_blocked": "pipeline.scratch_files_blocked";
+        "pipeline.typecheck_failed": "pipeline.typecheck_failed";
+        "pipeline.spec_vs_impl_failed": "pipeline.spec_vs_impl_failed";
     }>;
     actor: z.ZodString;
     actorType: z.ZodEnum<{

package/dist/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;;;;;EAE1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,YAAY,EAAE,SAAS,EAEnC,CAAC;AAGF,eAAO,MAAM,mBAAmB;;;;EAAqD,CAAC;AACtF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB;;;;;;;iBAG5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+D/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,YAAY;;;;;;;;iBAQvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGlD,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB,EAAE,UAKjC,CAAC;AAKF,eAAO,MAAM,kBAAkB,yBAA6B,CAAC;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAW7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;;;iBA0BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,gBAAgB;;;;;;;;iBAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAO9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,mBAAmB;;;;;;;iBAO9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAQhF,eAAO,MAAM,0BAA0B;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,SAAS,GACT,WAAW,GACX,QAAQ,GACR,SAAS,GACT,QAAQ;AACV;qEACqE;GACnE,WAAW,CAAC;AAChB,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAC1F,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAG3F,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC7C,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;uGACmG;IACnG,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;8EAE0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qGAAqG;IACrG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAGD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAGD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,QAAQ;IACvB,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,6DAA6D;IAC7D,mBAAmB,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,6DAA6D;IAC7D,kBAAkB,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,gFAAgF;IAChF,mBAAmB,CAAC,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;;;;;OAKG;IACH,UAAU,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAGD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAGD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EA4B/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;;;;;EAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,iBAAiB;;;;;;;iBAQ5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;iBAU1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../src/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,CAAC,EAAE,MAAM,KAAK,CAAC;AAIxB,eAAO,MAAM,eAAe;;;;;;;EAE1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,YAAY,EAAE,SAAS,EAEnC,CAAC;AAGF,eAAO,MAAM,mBAAmB;;;;EAAqD,CAAC;AACtF,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,iBAAiB;;;;;;;iBAG5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D,eAAO,MAAM,kBAAkB;;iBAE7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA+D/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAGlE,eAAO,MAAM,YAAY;;;;;;;;iBAQvB,CAAC;AACH,MAAM,MAAM,MAAM,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,YAAY,CAAC,CAAC;AAGlD,eAAO,MAAM,gBAAgB;;;;;iBAK3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB,EAAE,UAKjC,CAAC;AAKF,eAAO,MAAM,kBAAkB,yBAA6B,CAAC;AAC7D,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,oBAAoB;;;;iBAI/B,CAAC;AAEH,eAAO,MAAM,iBAAiB;;;iBAG5B,CAAC;AAEH,eAAO,MAAM,kBAAkB;;;;;;;;;;;;;iBAW7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,wBAAwB;;;;;;;;iBAOnC,CAAC;AACH,MAAM,MAAM,kBAAkB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,wBAAwB,CAAC,CAAC;AAE1E,eAAO,MAAM,0BAA0B;;;;;;iBA0BrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAE9E,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA6B3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,gBAAgB;;;;;;;;iBAQ3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAE1D,eAAO,MAAM,mBAAmB;;;;;;;;;;;iBAO9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,qBAAqB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBA2BhC,CAAC;AACH,MAAM,MAAM,eAAe,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,qBAAqB,CAAC,CAAC;AAGpE,eAAO,MAAM,mBAAmB;;;;;;;iBAO9B,CAAC;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,mBAAmB,CAAC,CAAC;AAEhE,eAAO,MAAM,2BAA2B;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAWtC,CAAC;AACH,MAAM,MAAM,qBAAqB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,2BAA2B,CAAC,CAAC;AAQhF,eAAO,MAAM,0BAA0B;;iBAGrC,CAAC;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,0BAA0B,CAAC,CAAC;AAG9E,MAAM,WAAW,YAAY;IAC3B,KAAK,EAAE,MAAM,EAAE,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;IACjB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,WAAW;IAC1B,cAAc,EAAE,MAAM,CAAC;IACvB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,MAAM,iBAAiB,GACzB,QAAQ,GACR,SAAS,GACT,WAAW,GACX,QAAQ,GACR,SAAS,GACT,QAAQ;AACV;qEACqE;GACnE,WAAW,CAAC;AAChB,MAAM,MAAM,cAAc,GAAG,SAAS,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,WAAW,CAAC;AAC1F,MAAM,MAAM,YAAY,GAAG,WAAW,GAAG,aAAa,GAAG,SAAS,GAAG,OAAO,GAAG,WAAW,CAAC;AAG3F,MAAM,WAAW,cAAc;IAC7B,EAAE,EAAE,MAAM,CAAC;IACX,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,WAAW,EAAE,MAAM,CAAC;IACpB,kBAAkB,EAAE,MAAM,EAAE,CAAC;IAC7B,MAAM,EAAE,MAAM,EAAE,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;CAClB;AAGD,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,WAAW,GAAG,QAAQ,GAAG,WAAW,CAAC;IAC7C,eAAe,CAAC,EAAE,eAAe,CAAC;IAClC;uGACmG;IACnG,mBAAmB,CAAC,EAAE,OAAO,CAAC;IAC9B,WAAW,EAAE,MAAM,CAAC;IACpB,YAAY,EAAE,MAAM,CAAC;IACrB,KAAK,EAAE,MAAM,CAAC;IACd,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;8EAE0E;IAC1E,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,WAAW;IAC1B,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,OAAO,EAAE,MAAM,CAAC;IAChB,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IACtB,MAAM,EAAE,iBAAiB,CAAC;IAC1B,SAAS,EAAE,IAAI,CAAC;IAChB,WAAW,CAAC,EAAE,IAAI,CAAC;IACnB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,kEAAkE;IAClE,UAAU,CAAC,EAAE,OAAO,CAAC;IACrB,2FAA2F;IAC3F,eAAe,CAAC,EAAE,MAAM,CAAC;IACzB,qGAAqG;IACrG,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IACtC;;;;OAIG;IACH,OAAO,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB;;;;OAIG;IACH,eAAe,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CACjC;AAGD,MAAM,WAAW,cAAc;IAC7B,KAAK,EAAE,MAAM,CAAC;IACd,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,eAAe,EAAE,MAAM,CAAC;IACxB,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,aAAa;IAC5B,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,MAAM,CAAC;IAChB,gBAAgB,EAAE,OAAO,CAAC;CAC3B;AAGD,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,MAAM,CAAC;IACb,gBAAgB,EAAE,MAAM,CAAC;IACzB,iBAAiB,EAAE,MAAM,CAAC;IAC1B,aAAa,EAAE,MAAM,CAAC;IACtB,UAAU,EAAE,MAAM,CAAC;CACpB;AAGD,MAAM,WAAW,QAAQ;IACvB,eAAe,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACjD,eAAe,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,kBAAkB,CAAC,GAAG,EAAE,WAAW,EAAE,MAAM,EAAE,cAAc,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5E,gBAAgB,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,aAAa,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACxE,6DAA6D;IAC7D,mBAAmB,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IACrF,6DAA6D;IAC7D,kBAAkB,CAAC,CAAC,GAAG,EAAE,WAAW,EAAE,UAAU,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAC5F,gFAAgF;IAChF,mBAAmB,CAAC,CAAC,OAAO,EAAE,iBAAiB,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;IAChE;;;;;OAKG;IACH,UAAU,CAAC,CAAC,GAAG,EAAE,WAAW,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC;CAC9C;AAGD,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB,QAAQ,EAAE,MAAM,EAAE,CAAC;IACnB,SAAS,EAAE,MAAM,EAAE,CAAC;CACrB;AAGD,eAAO,MAAM,oBAAoB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;EAyC/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,oBAAoB;;;;;;;;EAK/B,CAAC;AACH,MAAM,MAAM,cAAc,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,oBAAoB,CAAC,CAAC;AAElE,eAAO,MAAM,gBAAgB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;iBAY3B,CAAC;AACH,MAAM,MAAM,UAAU,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,gBAAgB,CAAC,CAAC;AAG1D,eAAO,MAAM,kBAAkB;;;iBAG7B,CAAC;AACH,MAAM,MAAM,YAAY,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,kBAAkB,CAAC,CAAC;AAE9D,eAAO,MAAM,iBAAiB;;;;;;;iBAQ5B,CAAC;AACH,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,iBAAiB,CAAC,CAAC;AAE5D;;;;GAIG;AACH,eAAO,MAAM,eAAe;;;;;;;;;;iBAU1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC;AAExD,eAAO,MAAM,eAAe;;;;;;;;;;;;;;;;;;;;;;;;iBAO1B,CAAC;AACH,MAAM,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,OAAO,eAAe,CAAC,CAAC"}

package/dist/types.js

@@ -297,6 +297,19 @@ export const AuditEventTypeSchema = z.enum([
     "slack.post_failed",
     "qa.run_triggered", "qa.run_completed", "qa.gap_issue_filed",
     "review.fanout_fallback_used", "review.model_low_output_ratio",
+    /** Tier 1a — the scratch-file denylist gate fired on this run, forcing a
+     *  draft PR. Payload includes the matched paths. */
+    "pipeline.scratch_files_blocked",
+    /** Tier 1b — `pnpm typecheck` (or the configured equivalent) reported
+     *  errors on the agent's diff before push. Payload includes errorCount and
+     *  up to 5 first messages. The runner forces draft and surfaces the output
+     *  in the PR body. */
+    "pipeline.typecheck_failed",
+    /** Tier 1c — the spec-vs-impl JSDoc gate found one or more docblock
+     *  references to `config.X` / `opts.X` / etc. that aren't defined anywhere
+     *  in the worktree. Payload lists matched (file, prefix, symbol) tuples
+     *  (capped at 20). */
+    "pipeline.spec_vs_impl_failed",
 ]);
 export const AuditActorTypeSchema = z.enum([
     "system", "pm-agent", "webhook", "dashboard-user", "cli",